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We proposed a scheme of continuous variable quantum key distribution, in which the bright 
Einstein-Podolsky-Rosen entangled optical beams are utilized. The source of the entangled beams 
is placed inside the receiving station, only a half of the entangled beams is transmitted with round 
trip and the other half is retained by the receiver. The amplitude and phase signals modulated 
on the signal beam by the sender are simultaneously extracted by the authorized receiver with the 
scheme of the dense coding correlation measurement for continuous quantum variables, thus the 
channel capacity is significantly improved. Two kinds of possible eavesdropping are discussed. The 
mutual information and the secret key rates are calculated and compared with that of unidirectional 
transmission schemes. 



PACS numbers: 03.67.Hk, 42.50.-p 

I. INTRODUCTION 

The quantum key distribution (QKD) based on the fundamental properties of quantum mechanics provides a 
way for two distant parties, usually named Alice (sender) and Bob (receiver), to share keys for encryption that 
can be absolutely secret in principle. Generally, we say, a communication channel is secure in the sense that any 
eavesdropper can be detected by the authorized communication partners. Initially, the discussions and experimentally 
demonstrations on QKD were concentrated within the setting of discrete variables (dv). There have been two basic 
schemes for qubit-based dv QKD, which are the sending of states from non-orthogonal bases, such as the original 
"BB84 protocol" proposed in 1984 by Bennett and Brassard and those based on sharing entanglement between 
the sender and receiver, such as Ekert's scheme (E91) So far, a plenty of dv QKD schemes have been presented 
and its potential application in the long distance secure communication have been experimentally demonstrated 
[1, 0, S 0, 0|- However, the data transmission rates and the detection efficiency of single photons in dv QKD 
schemes are strongly restricted by the today availably technical resources. For pursuing high secret keyrates, the 
continuous variable (cv) QKD has attracted extensive interest in recent years [1, H, |lO|, [ill, [H, [H, [13, [H, [H, 
[TgL [20l |. In addition, another motivation to deal with cv QKD is that the mature technology in quantum 
optics utilizing continuous quadrature amplitudes of the quantized electromagnetic field, including the preparation, 
manipulation and measurement of quantum states, can be used directly in cv quantum communication to provide 
efficient implementation. Due to the lack of fast and efficient single-photon detectors available at the moment, the 
nearly unit quantum efficiency of bright-light photodetectors at high speeds becomes the most attractive character for 
the explorers of cv QKD. On the other hand, the unconditionalness of cv entangled states emerged from the nonlinear 
optical interaction in an unconditional fashion is a valuable feature. Earlier, in 1993 J. Kimble's group in Pasadena 
accomplished the first experiment on quantum communication based on cv entanglement, in which the idea about 
the quantum secure communication was involved although the security of the protocol was not analyzed carefully 
Later, the cv entangled states has been successfully applied in various quantum communication protocols to 
demonstrate the unconditional quantum teleportation, entanglement swapping, quantum dense coding, and so on 
[2ll,[ll,[ll. 

A variety of cv QKD schemes employing the entanglement of the amplitude and phase quadratures of optical 
fields were successively proposed. In the scheme proposed by Ralph [lOj the entangled EPR fields, which are created 
by combining two independent amplitude-squeezed electromagnetic fields, are sent to Bob along with their local 
oscillators. A random phase shift is added to one of the fields to prevent an eavesdropper from retrieving the 
information by simple interference at a beam-splitter. Reid proposed a similar scheme exploiting the quadrature 
entangled fields, in which the protection against eavesdropping is provided by observing a Bell inequality violation 
In Ref. [15], the quantum keys are generated by measuring randomly the amplitude or the phase quadrature of 
one of the entangled EPR optical beams. Any disturbance introduced by an eavesdropper will degrade the correlations 
and hence possibly be detected. K. Bencheikh et al. proposed a QKD protocol based on cv entanglement, in which the 
quantum key generation is achieved by distributing each mode of EPR entangled optical beams to sender and receiver 
who perform instantaneous measurements of quadratures [31 • The quantum correlation between the measurement 
outcomes are used to constitute the bits of the random secret key. In these protocols, 50% of the bits at least are 



rejected because the base incompatibility and both of EPR entangled beams can be intercepted. Obviously, for a given 
noisy channel the optimal individual attack is to take a fraction of the transmitted signal beam, which equals the line 
losses at sender's site and then send the remainder to receiver through own lossless line. In this case, the eavesdropper 
is totally undetected, and gets maximum possible information according to the no-cloning theorem. Although in the 
above mentioned schemes the two-mode entangling optical fields are utilized, both of the entangling modes can be 
intercepted, so the security will not be more enhanced than that using a single mode coherent state of light when the 
optimal attack is used, which has been theoretically demonstrated in Ref. [16]. However, if only one of the entangling 
modes can be attacked and the other one can be exploited by the authorized receiver merely the entanglement will 
be helpful for increasing the mutual information between Alice and Bob and nothing to Eve. Based on this idea we 
propose a cv QKD scheme using the quadrature entanglement of two modes in which the security is enhanced and 
the transmission efficiency of the secret key is increased due to utilizing quantum dense coding communication. 

According to the condition of information theory for secure communication, i.e., for enabling extraction of a secure 
key using the error correction techniques and the privacy amplification [2^ . |25| , the mutual information between Alice 
and Bob, Iab, must exceed the information that cither of them shares with Eve (eavesdropper), Iae and Ibe- It has 
been proved in Ref. [16] that the condition Iab > Iae (Ibe) is always violated for the transmission losses beyond 
3 dB (50%) whatever the carriers of the information are the coherent, the squeezed or the entangled states of light. 
In the successively completed cv QKD experiments, the 3 dB loss limit was beaten by utilizing classical techniques, 
such as the method of the reverse reconciliation [11] or the post-selection procedure [l9|, (2^ . Is it possible to beat 
the apparent 3 dB loss limit only using the presently available quantum resources without demanding either the 
advanced and the unrealized quantum techniques (quantum memories and entanglement purification et al.) or the 
above mentioned classical methods? We note, in all communication schemes discussed by Ref. [16] the information 
is transmitted unidirectionally from Alice to Bob. In this case, the noise added in Alice's side cancels out because 
it disturbs equally Eve and Bob. Therefore, the security of these protocols does not rely on the noise feature of the 
used light beams. Especially, in the nonmodulated cv QKD scheme using Einstein-Podolsky-Rosen (EPR) entangled 
beams proposed by Silberhorn et al. [i5|], Alice keeps one of the EPR beams and sends the other to Bob. However, 
the photocurrent signals detected by Alice are opened on the classical channel, such that it is logically equivalent to 
a randomly modulated squeezed light beam thus brings no any improvement of security [l6j . 

In this paper, we propose a round-trip transmission cv QKD scheme based on EPR entanglement. A source 
producing EPR entangled light beams with the quadrature amplitude and phase correlations is placed inside the 
station of Bob. Only one of the EPR beams (signal beam) is sent to Alice and the other one (idler beam) is retained 
by Bob and never opened even its classical photocurrents. For enhancing transmission capacity we embed the benefits 
of cv quantum dense coding in the cv QKD scheme as that done by Degiovanni et al. at the dv protocol [275 ■ Two 
sets of independent random numbers are modulated on the amplitude and phase quadratures of Alice's EPR beam, 
respectively, then she sends the modulated signal beam back to Bob. At Bob, the two sets of signals are simultaneously 
decoded under the aid of the retained EPR beam with the homodyne detection [28*] . Since each half of the EPR beams 
has huge noise individually and the correlation noises between a pair of EPR beams are below the shot noise limit 
(SNL), if there is no too much excess noise added in the beams the signal-to-noise ratios (SNR) in Alice's signal beam 
must be lower than that decoded by Bob with the correlation measurements [H, H^]- We found, in this scheme the 
condition of Iab > Iae can be satisfied even when the transmission losses exceed 3 dB if higher EPR correlation is 
utilized. The security of the proposed system is based on the determinative cv entanglement of EPR light beams and 
the quantum no-cloning theorem. Two kinds of eavesdropper attack will be discussed: 1. the individual quantum-tap 
attack to the modulated signal beam on the way from Alice to Bob or to both unmodulated and modulated beams 
using an optical beam-splitter according to the requiement of optimal cloning. 2. the intercept-resend or partial 
intercept-mixing attack to the non-modulated beam on the way from Bob to Alice using the simulated EPR beams 
produced by Eve. The calculated results proved that the higher EPR entanglement is helpful to beat the 3 dB loss 
limit in the proposed scheme. The regions of the secure raw secret key, {Iab — Iae) > 0, as the functions of the 
line transmission and the EPR entanglement correlation factor are calculated. Additionally, like the no-switching 
cv QKD scheme presented in Refs. [17] and [20], the usual random switching between measurement bases is not 
required and thus the channel capacity can be significantly improved due to the application of quantum dense coding 
method. Further, in the dense coding cv QKD scheme we utilize the bright EPR beams with the anticorrelated 
amplitude quadratures and the correlated phase quadratures as well as the Bell-state direct detection technique 
proposed and used in our previous papers [H, HI] , therefore the local oscillation optical beam is not needed in the 
Bob's measurements for extracting the secret keys. Naturally, the protocol dispenses with the technical limitation on 
the communication bandwidth placed by the local oscillator switching and is relatively simple to implement. Here 
we should mention although the proposed protocol can beat the loss limit of 3 dB in principle, however due to 
practical difficulties to produce quadrature entangled light with high entanglement degree and highly susceptibility of 
cv entanglement to loss the reachable communication distance has to be strictly limited by the available entanglement 
quality. It has been theoretically demonstrated that the entanglement of a cv resource, though being degraded on 



a transmission line with loss never vanishes completely for any degree of the loss, thus once the technologies of cv 
entanglement distillation and purification are exploited the drawbacks will be possible to be overcome [29L l30l | . 

The paper is organized as follows. In the second section the cv QKD system is described. The security against the 
quantum-tap attack and the intercept-resend attack are discussed in the third and the fourth section, respectively. A 
brief conclusion is given in the fifth section. 



II. CV QKD SYSTEM USING EPR ENTANGLED OPTICAL BEAMS AND ROUND-TRIP 

TRANSMISSION 

The schematic of the proposed cv QKD system is shown in Fig. 1. The bright EPR optical beams, a and 6, with 
the ant icor related amplitude quadratures and the correlated phase quadratures are produced from an entanglement 
source. For experiments, this kind of EPR beams can be obtained with a nondegenerate optical parametric amplifier 
(NOPA) below the pump threshold operating in the state of deamplification, which has been well described in Ref. 
[23]. The field annihilation operators, a and 6, are expressed in terms of the amplitude (Xa(^b)) a-nd phase (ya(ti)) 
quadrature operators: 

d = Xa+ iYa, 



b^Xb + iYb. (1) 
The quadrature operators can be written as the sum of a steady state and a fluctuating component 

X ^<X> +SX, 



Y =<Y > +SY, (2) 

which have variances of V{X) — {{SX)"^) and V{Y) — {{6Y)'^). For the EPR entangled optical beams produced from 
a NOPA operating at deamplification, the variances for each individual beam (a or b) and the correlation variances 
are determined by the correlation factor 7 (or called squeezing factor), which depends on the strength and the time 
of parametric interaction [III [3 , 

V{Xa) = V{Ya) = V{Xb) = V{Yb) = (7 + l/7)/2, (3) 



V{Xa + Xb) = V{Ya - Yb) = 27, (4) 

where we have assumed that the two modes, d and 6, are totally balanced during the process of measurements and 
this requirement is easily achieved in the experiments. The values of 7 are taken from to 1, 7 = and 7 = 1 
correspond to the ideally perfect correlation and no any correlation between d and 6, respectively. The modes d and 
b from NOPA have the orthogonal polarizations and can be separated with a polarizing-beam-splitter (PBS). The 
entanglement source is placed inside the station of Bob. The optical mode a, say the signal mode, is sent to Alice 
as the quantum channel of the transmitted signals. The mode b, say the idler mode, is retained by Bob and never 
is opened. The beam-splitter Ri and R2 with same reflectivity (such as R = 10%) are placed in Bob and Alice who 
extract a small part from b and d beam by means of Ri and R2, respectively. The extracted beam from b (a) is 
detected by the balanced-homodyne-detector HDi (HD2) for checking the possible eavesdropper on the way from Bob 
to Alice, which will be discussed in Section IV. Like the cv coherent state quantum cryptography protocol presented in 
Refs. [18] and [20], for the optimal information rate both amplitude and phase are modulated with Gaussian random 
numbers [29I ]. Alice draws two random real numbers, Xg and Yg, from Gaussian distributions with zero mean and a 
variance of V{Xs) and V(Ys). Then she modulates the amplitude and phase quadratures of the transmitted d from 
R2 by Xs and Ys with the amplitude (AM) and phase (PM) modulators, respectively. Alice transmits the modulated 
signal mode d back to Bob. We assume that the channel transmission efficiencies from Bob to Alice and from Alice 
to Bob without the presence of Eve are identical and equal to 77. Bob demodulates simultaneously the modulated 
amp litude (Xg) and phase (Ys) signals using the Bell-state direct detection under the help of the retained mode b 
[28| . The Bell-state direct detection system consists of a 50-50 beam-splitter (BS), a pair of photoelectric detectors 



(Di and D2), two radio-frequency splitter (RFl and RF2), a 7r/2 phase shifter (PH), a positive and a negative power 
combiner (© and 0). The beams 61 and 02 interfere on the beam-sphtter (BS) and then the output beams c and d 
are directly detected by Di and D2, respectively. £> stands for the vacuum noise added in the quantum channel due 
to losses. The vacuum noises in different terms are not correlated, thus they have to be considered independently. In 
the foUowings we will calculate the physical conditions for satisfying Iab > Iae- 

III. SECURITY CONDITIONS AGAINST OPTIMAL QUANTUM- TAP ATTACK 

It has been theoretically demonstrated by Curty et al. that the presence of detectable entanglement in a 

quantum state effectively distributed between Alice and Bob is a necessary precondition for successful key distillation. 
In the proposed scheme, the quantum entanglement of quadratures shared by Alice and Bob is always existent and 
detectable so far as the original EPR entanglement is not exhausted totally by the line losses. The existence of cv 
entanglement between Alice and Bob provides the base of security for the proposed protocol. The absolute theoretical 
security of cv QKD protocols against any type of attack has already been proven [H, [H, [H, [33| . Here we do not 
address the issue of unconditional security and also do not involve the collective attack, which requires the quantum 
memory that is not easy to be prepared in today technical condition. We consider security against individual attacks 
only. Obviously, at the loss limit the optimal individual attack is that Eve replaces the lossy channel by a perfect 
one with an adapted beam splitter to mimic the losses and then generate a cloned signal with a fidelity depending on 
the beam splitter transmission. In this case Eve is totally not detected and gets the maximum possible information 
according to the no-cloning theorem which is the maximum information amount allowed by the laws of physics. Since 
there is no any signal on the quantum channel from Bob to Alice, we first consider a splitting attack on the channel 
from Alice to Bob. A splitting attack involving both channels will be considered later in this section. 

We will use the Shannon formula of the optimum information rate to calculate the raw secret key rate. The optimum 
mutual information (/) of a noisy transmission channel is i35] 

I^{l/2)log2{l + S/N), (5) 

S/N is the signal-to-noise ratio (SNR). Alice and Bob can establish a secret key if and only if Iab > Iae, thus the 
secret key rate is expressed as p^] 

AI = Iab-Iae- (6) 

In the case of AJ > the communication between Alice and Bob will be viewed as being secure. The simpler 
quantum-tap attack is to take a fraction (1 — rj) of the beam with the modulated signals at Alice's site, and to send 
the fraction rj to Bob through her own lossless line. The modulated optical mode at Alice is written as: 

ai Vl - R{y/va + y/1 - r\v) + /R;> + s, (7) 
and when the mode is transmitted back to Bob the mode d\ becomes ai if without any interception: 

di = y/rjdi + ^\-r\v 

= Vl - R{T]d ^J^^^{\^^v\ + ^fRj]v + - W + T^s, (8) 

where R is the reflectivity of the beam-splitter Ri and R2, s stands for the state of the modulated signals. The 
signal state is prepared at Alice by displacing the amplitude and phase quadratures of a vacuum state by Xg and Yg 
respectively. 

In order to measure the amplitude and phase signals by means of the Bell-state direct detection simultaneously. 
Bob has to attenuate the retained idler beam h to balance di- The attenuated h is expressed by h\. 

bi = VI - R[vb + VvC^ - V)'>] + V^nv + (9) 
The two output fields from the 50-50 beam-splitter (BS) of the Bell-state direct detection system are [1^ 



The variances of the sum and the difference of c and d equal to [2l 



Vbx = -[il-R)v^V{Xa+Xb) + 2{l-ij^ + R7]^) + r^V{X,)], 



(12) 



Vby = 2 ^ RWViYa - n) + 2(1 - + i?r/2) + rjV{Ys)], 



(13) 



where, V{Xa + Xi,), V{Ya — Yb) and V{Xs), V{Ys) are the normahzed correlation variances of the quadratures between 
a and b and the normalized variances of the signal quadratures, respectively. The SNR of Bob's measurement for the 
amplitude and the phase signals are respectively: 
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(1 - R)v^V{Xa + Xb) + 2(1 - ry2 + ^^2) 



(14) 
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vV{Ys, 



(1 - RWV{Ya - Yt) + 2(1 - 772 + i?^2) 



(15) 



For the dense coding QKD scheme. Eve takes a fraction (1 — r/) of the beam ai at Alice's site and then simultaneously 
measures the amplitude and phase quadratures of the intercepted beam by means of a 50-50 beam-splitter and two 
sets of homodyne detector (HD) as shown in Fig. 2. The variances of the amplitude and phase quadratures measured 
by Eve are respectively expressed by: 



Vex = 2 h(l - - RWiXa) + 2 - (1 - R),j + (1 - R)rj^ + (1 - vWiX,)], 



(16) 



Vey = 2 [^(1 -'?)(!- R)yiya) + 2 - (1 - i?)77 + (1 - R)f]^ + (1 - v)V{Ys)]. 



The SNR of Eve's measurements equal to 

(S/N) EX = 



{l-rj)V{X,) 



(1 - i?)7?(l - fi)V{Xa) + 2 - (1 - R)7] +{1- R)ri^ 



(17) 



(18) 
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(1 - 7^)V{Y,) 



(1 - R)r]{\ - ri)V{Ya) + 2 - (1 - i?)r/ + (1 - R)ri^ 



(19) 



Substitute the equations (14) (15) and (18) (19) into the Eq. (5) we can calculate the mutual information /^b 
and I'^E^ ^AE' "^^ll the total secret key rate AI, which is the sum of the secret key rates of the amplitude (A/^) 
and phase (A/^) quadrature 



AI = 



J 4 R + -lAB 



= AI 
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(20) 



Figure 3 shows the secret key rate as a function of the channel efficiency 77 and the correlation factor 7 for the 
given signal variances and the reflectivity R, where the normalized V{Xs) = y(Ys) — 10 and R — 0.1. In the case 
of 7 = 1, i.e. without any EPR correlation between a and h, the scheme is secure (A/ > 0) only at 77 > 0.5, which 
corresponds to the conclusion in Ref. [16] for the unidirect transmission. For comparison, the function of AI versus 7/ 
in the unidirectional transmission (see Eq. (5) of Ref. [16]) is drawn in Fig. 3 with the dashed line. We can see, when 
77 > 0.5 our scheme is better than that of the unidirectional transmission even 7 = 1 because the dense coding scheme 
is applied. However, for the lower 77 (77 < 0.5), the unidirectional transmission is advantaged since the transmission 
losses are doubled in the round-trip transmission protocol. For 7 = 0.05 and 7 = 0.4 (corresponding to the correlation 
degree of 13 dB and 4 dB, respectively), AI will be larger than zero once 77 > 0.33 and rj > 0.46, respectively. It 
means, the limitation of 3 dB losses (77 > 0.5) can be beaten in our scheme using EPR entanglement if Eve only taps 
the modulated channel. It is obvious from the equations of SNR, for the channel with very high losses (jj 0) the 



SNR will only depend on the variances of the modulated signal, V{Xs) or V{Ys), thus all figures cross to the same 
point on AI axis [AI = -2.58 in the case of V{Xs) = V{Ys) = 10]. 

Figure 4 shows the dependences of the secret key rate on the correlation factor 7 for 77 0.7, 0.5 and 0.25 respectively. 
The throe dashed linos correspond to the function curves of the unidirectional transmission with rj = 0.7, 0.5 and 0.25 
also for comparison. When 77 > 0.5, the secret key rates of the proposed scheme are always larger than that of the 
unidirectional transmission. For 77 = 0.25, the unidirectional transmission is not secure always while our scheme can 
be secure if the EPR correlation is high enough (7 < 0.02). 

An other better clone attack scheme is that Eve taps both the unmodulated optical beam before Alice and the 
modulated signal beam after Alice, then to substract the two intercepted signal beams for performing the correlation 
measurement. In this case the two extracted beams are the thermal optical fields and very noisy due to the added 
vacuum noise on the beam-splitter. According to the requirement of the above-mentioned optimally individual attack, 
the extracted amount should match the line loss. Eve has to simultaneously measure the amplitude and phase 
quadratures of both the intercepted unmodulated optical beam and the modulated signal beam by means of four sets 
of homodyne detection systems. The measured amplitude and phase quadratures of the intercepted light beams on 
the ways before and after Alice are respectively: 

x'e, = -^{./T^Xa - Vvx, + X,), (21) 



%, = ^{V^ya-vvy^-Y^); (22) 

and 

x'e, = -^Wvi^-v){^-R)Xa + (1 - v)VT^X, + y^R{l - r])X, - ^X, + X, + ^T^X,], (23) 
v2 

y'e^ = ^Wn{^-vi){l-R)Ya + (1 - + V'J?(1 - 11)% - -Y, + ^r^n] . (24) 

For eliminating the thermal-like component of the noises [^(Xa) and y(ya)], Eve multiplies the tapped unmodulated 

signal beam [Eqs. (21) and (22)] by \/'rj{\ — R), that is to attenuate the optical beam by a factor of ^ri{l — R), then 
subtracts the tapped modulated signal beam [Eqs. (23) and (24)] from it. The variances of 77(1 — R)X^^ — X^_^ 
and [^77(1 - R)Y'^^ - YgJ equal to 

V'ex = - (1 - r?)vT^]2 + 1 + ,,(1 _ i?) + ^ + _ ,;) + (1 _ 77)y(X,)}, (25) 



V'ey = - (1 - + 1+ 77(1 - i?) -h 77 + ii(l - 77) + (1 - 77)1/(1;)}. (26) 

The corresponding signal to noise ratios are 

^ ' [77yr^-(l-77)yr^]2 + l + 77(l-i?)+77 + i?(l-7/)' ^ ' 



(1 ^ vWiYs. 

[r|^fT^ - (1 - 7?)x/r^]2 + i + r]{l-R) + 'n + R{l-r])' 



Figure 5 shows the function curves of the secret key rate AI versus the channel efficiency 77 for the dual-tap attack, 
where the normalized V{Xs) = V{Ys) = 10 and R= 0.1. For 7=1, the secret key rate is larger than zero only when 
77 > 0.5, which is same to the case of only tapping the modulated signal. For 7 = 0.05 and 7 = 0.4, the secret key 
rate is positive when rj > 0.46 and rj > 0.474, respectively. We see, under this attack due to that the influence of the 
thermal-like component of noises involved in the two intercepted optical beams is canceled, the effect of increasing 
EPR correlation to the secret key rate will not be as strong as that only attacking modulated signal beam (Fig. 3 
and 4). However, we still see the possibility to beat the apparent 3 dB loss limit of the raw secret key rate. 



IV. SECURITY AGAINST INTERCEPT-RESEND ATTACK 



An other possible attack on the way from Bob to Alice is that Eve intercepts totally the signal beam without the 
modulated signals and retains it in her station, then she sends a simulated beam, which can be a half of simulated 
EPR entangled beams, to Alice. If Alice does not know that the beam is simulated, she will modulate the signals 
on it and send it out as usual. Eve intercepts the modulated signal beam again and demodulates the signals using 
the other half of the simulated EPR beams retained by herself as that done by Bob. At last she modulates the same 
signals on the real signal beam and sends it back to Bob. Fortunately, in our scheme Bob retains a half of the real 
EPR beams and never opens it. Any simulated beam can not be quantum-correlated with the real one. Bob and 
Alice take a part of the beam b and a from Ri and R2 respectively, then randomly measure the amplitude or phase 
quadrature of the taken partial beam with the homodyne detector (HDi and HD2) during the communication. Alice 
sends her measurement results to Bob by a classical channel and Bob checks the quantum correlation between his 
quadratures and Alice's quadratures measured simultaneously. The correlation variances of the amplitude (Vrx) and 
the phase (Vry) between the reflected beams from Ri and R2 are: 

Vrx = ^RvViXa + Xt) + 1- Rt], (29) 

Vry = ^RvV{Ya - n) + 1 - (30) 

Statistically, they simultaneously measure the same quadrature with 50% probability and the correlation variances of 
the two measured values will be below the shot noise limit (SNL) due to the existence of EPR correlations between 
a and b if there is no the intercept -resend attack. When the simulated beam is used, the quantum correlation 
disappear thus the variances always are higher than the SNL. The quantum noncloning forbids Eve to copy the 
quantum fluctuation of the real signal beam and provides the physical mechanism of security for our scheme. In cv 
experiments the correlation variances of quadratures up to 0.1 dB below the SNL can be precisely measured by means 
of homodyne detectors under today technical condition. As a loose limitation we take 0.3 dB, which was detected in 
the early experiment of quantum optics in 1985 to be a bound for detecting Eve with a high probability over 
99%. For given original EPR entanglement and the line transmission, the requirement Vrx — Vry =0.928 (according 
to 0.32 dB below the SNL) is reached when 

R= (31) 

7^[V{Xa+Xt)-2] 

For example, if 7 = 0.2 [corresponding to V{Xa + X^) = V{Ya ~ %) =0.4, which is 7 dB below the SNL, which is 
experimentally reachable at present [37i].], rj =0.9 and Vrx = Vry =0.928, we have R = 0.1. In the calculations 
of equations (7)- (20) the effect of R has been involved. The procedure checking the intercept-resend attack can be 
performed instantaneously during the communication proceeding and the communication will not be disturbed only 
the original quantum correlation is decreased, for example if R = 0.1 the correlation is decreased from 7 dB to 5.5 
dB. 

If Eve partially mixes her own EPR beam with the transferred real one instead of totally replacing it, according 
to the optimally cloning scheme the replaced partial amplitude should equal -^/l — rjXeiYe) [A"e(y'e) is the amplitude 



(phase) of a half of EPR beams prepared by Eve and 
quadratures of the optical field received by Alice are 







Xa 




Ye 




Ya 



The amplitude and phase 



X^ = ^Xa + v/T^^e, (32) 



Ya = VvYa + V^Y^, (33) 

and the remainders retained by Eve are 



X'e = VT^Xa - VvXe, 



(34) 



(35) 



Then Eve intercepts all modulated beam and performs the correlation measurement using the other half {Xf^Yf)oi 
the entangled beams prepared by Eve. In this case, V{Xf, -VXj) [F(Fe — )] should be smaller than SNL and depends 
on the correlation degree (7^) of Eve's EPR beams. The correlation variances measured by Eve equal to 

^'ex = ^[(1 - - + ^/) + (1 - RW{K) + (1 - R)n + 2R + y(x,)], (36) 



Vey = ^[(1 - ^)(l - v)V{Ye - Yf) + (1 - R)iiV{Ya) + (1 - R)7i + 2R+V{Y,)]. (37) 
The corresponding SNRs are 

{S/N)"ex = "^^^^ , (38) 

{l-R){l-rj)V{X,+Xf) + {l-R)riV{Xa) + {l-R)Ti + 2R' 

{S/N)"ey = ^^^^ • (39) 

{l-R){l-n)V{Y,-Yf) + {l-R)riV{Ya) + {l-R)n + 2R 

The correlation degree between Bob's beam reflected from Ri and Alice's beam from R2 must be decreased since 
the partial non-correlated light [Xe(Fe)] is mixed in the measured beams. The calculated variances are 

V'rx = \ [RriV{Xa + lb) + R{1 - n)V{X,) + 2-R-Rr,], (40) 



Vry = 1[RVV{Y„ - Yf,) + R{1 - v)V{Y,) + 2-R-Rr]]. (41) 

The higher the EPR correlation between Xe{Ye) and Xf{Yf) is, the larger the \^(Xe)[T/(ye)] is, thus Vj^xi^Rv) 
increases. For example, taking je =0.05 (corresponding to 13 dB below the SNL), when 7 =0.2 (7 dB below the 
SNL), V{Xs) = V{Ys) =10, R =0.1 and 77 =0.9, if the Ught intensity mixed by Eve is 10% of the total intensity, the 
correlation degree between Alice's and Bob's reflected beams will be reduced from 0.32 dB (without eavesdropper) to 
0.11 dB, thus the presence of Eve will be revealed. 

On the other hand. Eve has to add partial uncorrelation light into the beam retained by her to make Bob receiving 
equal intensity of light, otherwise she must be revealed immediately. The amplitude and phase quadratures of the 
light beam sent back to Bob are 



1: = riVT^Xa - ^^^^v^le + Jl - y ^-^ + VvXs, (42) 



F; = rjVT^Y, - + ^1 - + ^Ys. (43) 

The correlation variances and the SNRs measured by Bob equal to 

y'nx = - R)yl'y{^a + ^6) + ^'i^~^V (Xe) + 2 - (1 - i?)r?2 - ffi^ + r)V{X,)\, (44) 
2 1 — 1 ~ ^ 



v'by = kl - KWV{% - n) + tiL^v{%) + 2 - (1 - R)i^^ - !^!iL_^ + ^v{Y,)], (45) 
2 1 — r? 1 — ^7 



and 



^^^"^^"^'^ (1 - RWV{X^ + 1.) + ^nl) + 2 - (1 - - ^ ' ^''^ 



(1 - RWV{Y, - n) + + 2 - (1 - RW 



(5/iV)By = ^ ^ ^ ^T-^. (47) 



If Eve replaces 10% of total beam intensity the SNRs calculated with Eq. (46) and (47) are {S/N)g-^ = 
{S/N)Iy =0.15 ( 7B =0.05, 7 =0.2, V{X,) = ViYs) =10, R =0.1 and r/ =0.9) and the SNRs calculated with 
Eq. (14) and (15), which only consider the optimal cloning attack of one channel, are {S/N)bx = {S/N)by =10.8 
with same parameters. The significant reduction of the SNRs will clearly reveal the presence of Eve also. 

Although Eve might obtained more information by means of the correlation measurement using the EPR beams 
prepared by herself, her presence will be also revealed. Of course, if Eve has perfect entangled beams and perfect 
quantum memory the eavesdropping scheme might be better than that totally intercepting. For more detailed dis- 
cussion we have to compare the information amounts respectively obtained by Bob and Eve in this case and find the 
region for the secure transmission, which have been over the range of this paper. 



V. CONCLUSION 



We proposed a round-trip transmission cv QKD scheme based on the EPR entanglement of optical beams. We 
mixed the advantage of cv dense coding into QKD, thus the secret key rate is significantly improved. Due to Bob's 
simultaneously measuring both amplitude and phase quadratures the randomly switching between measurement bases 
is not required, such that the serious technical limitation on the communication bandwidth placed by the local oscillator 
switching and the technical difficulty of precisely controlling the phase of a local oscillator are not existent any more. 

At last, we should mention, although the EPR optical beams with the anticorrelated amplitude and correlated 
phase quadratures are discussed in the paper, the scheme and all calculations are appropriate also to the EPR optical 
beams with the correlated amplitude and anticorrelated phase quadratures {V{Xa — Xf,) < SNL, 1/(1^ +^f)) < SNL), 
which can be produced from an optical parametric amplifier operating at amplification p^ . |2]| . In this case. Bob 
only needs to substitute the Bell-state direct detection with two sets of the normal balanced homodyne detector as 
described in the original cv dense coding paper [2^ . 

Several possible attack schemes have been discussed, however the unconditional security for the proposed protocol 
has not been demonstrated. Although Eve's eavesdropping technologies are various, the discussed attack schemes 
are representative and usually used. Especially, the discussions about beam-splitter attack are based on the optimal 
individual attack allowed by the no-cloning theorem of quantum mechanics, thus have common significance. The 
theoretical demonstration of unconditional security for the proposed scheme is beyond the scope of the paper and 
might be remained to be an open question. 

Due to the sensitivity of the optical quantum entanglement to losses the application of the proposed scheme in 
the long-distance communication is limited. However the proposed scheme have shown the possiblility to beat the 
loss limit of 3 dB using the cv EPR entanglement. Along with the development of quantum optical technology the 
higher and higher determinative cv entanglement can be reached, so the potential of the proposed scheme in future 
application is expected. 

This work was supported by the National Natural Science Foundation of China (Grants No. 60238010 and 
60378014). 
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Captions of figures: 

Fig. 1 The schematic of the quantum key distribution with bright EPR beams. 

AM-amphtude modulator, PM-phase modulator, R-reflection rate of the beam-splitter Ri and R2, PBS-polarization 
beamsplitter, HD-homodyne detection system, 77-channel efficiency, PH-7r/2 phase shifter, RF-radio-frequency splitter. 
Fig. 2 Eve's detection system. HD-homodyne detection system, 77-channel efficiency. 

Fig. 3 The secret key rate versus channel efficiency at various correlation degrees for the case only tapping modulated 
beam. V{Xs) = V{Ys) — 10, R — 0.1, solid lines-the function curves of the presented scheme, dashed Hne-the function 
curves of the unidirectional transmission scheme. 

Fig. 4 The secret key rate versus correlation degree at various channel efficiencies for the case only tapping 
modulated beam. V{Xs) — V{Ys) = 10, i? = 0.1, solid lines-the function curves of the presented scheme, dashed 
lines-the function curves of the unidirectional transmission scheme. 

Fig. 5 The secret key rate versus channel efficiency at various correlation degrees for the case tapping both 
modulated and unmodulated beams. V{Xs) = V{Ys) = 10, R = 0.1 




Fig. 1 



Alice 


HD 


Eve 


Bob 


V 

— 


50-50 

/ 


HD 


a, 




a. 





Fig.2 



